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DETAILED ACTION 

1. This action is responsive to amendment received Sep 3, 2010. Claims 1-4, 6-16 
and 18-30 are pending examination. 

Claim Rejections - 35 USC §112 
The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

2. Claims 11-12 are rejected under 35 U.S.C. 1 1 2, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

3. The elements of claim 1 1 : "means for generating" and "means for forwarding" are 
means (or step) plus function limitation that invokes 35 U.S.C. 112, sixth paragraph. 
However, the written description fails to disclose the corresponding structure, material, 
or acts for the claimed function in the specification of the application. 

Applicant is required to: 

(a) Amend the claim so that the claim limitation will no longer be a means (or step) 
plus function limitation under 35 U.S.C. 112, sixth paragraph; or 

(b) Amend the written description of the specification such that it expressly recites 
what structure, material, or acts perform the claimed function without introducing any 
new matter (35 U.S.C. 132(a)). 

If applicant is of the opinion that the written description of the specification 
already implicitly or inherently discloses the corresponding structure, material, or acts so 
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that one of ordinary skill in the art would recognize what structure, material, or acts 
perform the claimed function, applicant is required to clarify the record by either: 

(a) Amending the written description of the specification such that it expressly 
recites the corresponding structure, material, or acts for performing the claimed function 
and clearly links or associates the structure, material, or acts to the claimed function, 
without introducing any new matter (35 U.S.C. 132(a)); or 

(b) Stating on the record what the corresponding structure, material, or acts, 
which are implicitly or inherently set forth in the written description of the specification, 
perform the claimed function. For more information, see 37 CFR 1 .75(d) and MPEP §§ 
608.01(0) and 2181. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

4. Claims 13-16 and 18 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

Claim 13 recites in the preamble "a network device comprising." The body of 
claim 13 recites "a network interface" which is software according to the disclosure of 
the application. Therefore claims 13-16 and 18 are non-statutory because it is directed 
towards software, per se, lacking storage on a medium, which enables any underlying 
functionality to occur. It is not clear whether instructions are in executable form and 
therefore there is no practical application. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1-4, 6-16 and 18-30 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Pfwltzner, U.S. Patent No. 7,506,069 in view of Amin et al., U.S. 
Patent No. 6,854,014 (referred to hereafter as Amin). 

As to claim 1 , Pfwltzner teaches a method of providing access to services across 
a computer network, comprising the step of: 

generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
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meeting) and for reconfiguring the access-control server by storing a dependence 
between the request and the requesting network access device (see col. 1 1 lines 56- 
col. 12 lines 13 and col. 7 lines 8-col. 8 lines 34, the business objects are restructured 
based on the type of the requesting device and the relationship between the requesting 
address and the type of device are stored in a table for future reference). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 6, Pfwltzner teaches a method according to Claim 1 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 7, Pfwltzner teaches a method according to Claim 1 in which a policy 
is applied to the access request to determine whether access will be allowed, and if so 
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for what services (see col. 14 lines 38-53, identity of user is verified to determine 
whether access is allowed). 

As to claim 8, Pfwltzner teaches a method according to Claim 1 in which network 
resources are provisioned in dependence upon the access request (see col. 14 lines 
38-53). 

As to claim 9, Amin teaches a method according to Claim 1 in which the steps of 
receiving and applying are performed by an access-control server or an Authentication, 
Authorization and Audit (AAA) server (see col. 14 lines 38-53, redirection server 
performs authentication). 

As to claim 10, Pfwltzner teaches a method according to Claim 9 in which the 
access-control server uses the access request to select among multiple services that 
are specified for a particular device (see col. 13 lines 13-45, different versions and 
formats are selected based n the device type and user identity). 

As to claim 1 1 , Pfwltzner teaches a device for providing access to services 
across a computer network, comprising: 

Means for generating an access request by a requesting network access device 
through which an end user device can obtain access to network resources, said access 
request comprising a requesting network access device description "computing 
environment information" and a plurality of service requests indicative of computer 
services "meeting" for which the network device requests provisioning (see col. 10 lines 
36-41 , lines 44-53, end user sends a request to access a meeting using a URL); 
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wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

means for forwarding said access request for authentication and authorization 
(see col. 10 lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is 
hosting the meeting) and for reconfiguring the access-control server by storing a 
dependence between the request and the requesting network access device (see col. 
11 lines 56-col. 12 lines 13 and col. 7 lines 8-col. 8 lines 34, the business objects are 
restructured based on the type of the requesting device and the relationship between 
the requesting address and the type of device are stored in a table for future reference). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 



Application/Control Number: 1 0/691 ,994 Page 8 

Art Unit: 2441 

As to claim 13, Pfwltzner teaches a device for providing access to services 
across a computer network a network interface, comprising computer storage medium 
executing code to perform the steps comprising: 

generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 

wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting) and for reconfiguring the access-control server by storing a dependence 
between the request and the requesting network access device (see col. 1 1 lines 56- 
col. 12 lines 13 and col. 7 lines 8-col. 8 lines 34, the business objects are restructured 
based on the type of the requesting device and the relationship between the requesting 
address and the type of device are stored in a table for future reference). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 



Application/Control Number: 1 0/691 ,994 Page 9 

Art Unit: 2441 

generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 18, Pfwltzner teaches a device according to Claim 13 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claims 19, Pfwltzner teaches a system for providing access to services 
across a computer network, comprising: 

An access control server "redirector server" being arranged: 

receive an access request by a requesting network access device through which 
an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 
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wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

apply a policy to the access request to determine whether the access will be 
allowed, and if so for what services (see col. 10 lines 56-col. 1 1 lines 3, the access 
request is forwarded to the server that is hosting the meeting) and for reconfiguring the 
access-control server by storing a dependence between the request and the requesting 
network access device (see col. 11 lines 56-col. 12 lines 13 and col. 7 lines 8-col. 8 
lines 34, the business objects are restructured based on the type of the requesting 
device and the relationship between the requesting address and the type of device are 
stored in a table for future reference). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
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identity of the user before granting access to network resources which would make the 
system and method more secure. 

As to claim 20, Pfwltzner teaches a device according to Claim19 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 21, Amin teaches a device according to Claim 19 in which the steps 
of receiving and applying are performed by an access-control server or an 
Authentication, Authorization and Audit (AAA) server (see col. 14 lines 38-53, 
redirection server performs authentication). 

As to claim 22, Pfwltzner teaches a system according to Claim 19 in which the 
access-control server uses the access request to select among multiple services that 
are specified for a particular device (see col. 13 lines 13-45, different versions and 
formats are selected based n the device type and user identity). 

As to claim 23, Pfwltzner teaches a storage medium executing code to perform 
steps, comprising the step of: 

generating an access request by a requesting network access device through 
which an end user device can obtain access to network resources, said access request 
comprising a requesting network access device description "computing environment 
information" and a plurality of service requests indicative of computer services "meeting" 
for which the network device requests provisioning (see col. 10 lines 36-41, lines 44-53, 
end user sends a request to access a meeting using a URL); 
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wherein the requesting network access device description includes one or more 
of: a requesting network access device vendor, a requesting network access device 
type, a requesting network access device version (see col. 1 1 lines 28-37, the request 
includes device information such as the type of device); and 

forwarding said access request for authentication and authorization (see col. 10 
lines 56-col. 1 1 lines 3, the access request is forwarded to the server that is hosting the 
meeting) and for reconfiguring the access-control server by storing a dependence 
between the request and the requesting network access device (see col. 1 1 lines 56- 
col. 12 lines 13 and col. 7 lines 8-col. 8 lines 34, the business objects are restructured 
based on the type of the requesting device and the relationship between the requesting 
address and the type of device are stored in a table for future reference). 

Pfwltzner does not explicitly teach that the access request is an authentication, 
authorization and access request. However, Amin teaches a system and method for 
generating authentication, authorization and access requests to obtain access to 
network resources (see Amin col. 14 lines 39-lines 66 and col. 18 lines 25-54). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of aaa requests in Pfwltzner's system and method as 
taught by Amin. Motivation to do so comes from the knowledge well known in the art 
that using AAA requests is very widely and commonly used as admitted by the applicant 
(applicant's response pages 8-9) and that using AAA requests would authenticate the 
identity of the user before granting access to network resources which would make the 
system and method more secure. 
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As to claim 27, Pfwltzner teaches a medium according to claim 23 wherein the 
requesting access device includes one or more of device type, vendor and version (see 
col. 11 lines 28-37) 

As to claim 28, Pfwltzner teaches a medium according to Claim 23 in which the 
service requests include a request for a particular service level (see col. 14 lines 38-53, 
user may have different access levels based on whether user is author or not). 

As to claim 29, Pfwltzner teaches a device according to Claim 11 or 13 
comprising a requesting network access device which controls end user device access 
to a network, and which requests services on behalf of one or more said end users (see 
col. 14 lines 38-53, redirection server performs authentication). 

As to claim 30, Pfwltzner teaches a device according to claim 11 or 13 
comprising a in which said requesting network access device requests services for its 
own use (see col. 14 lines 38-53). 

As to claims 2, 4, 12, 14, 16, 24, 26, Pfwltzner teaches a method, system, 
device and medium of providing access to services across a computer network, 
comprising the step of: generating an access request by a requesting network access 
device through which an end user device can obtain access to network resources, said 
access request comprising a requesting network access device description and a 
plurality of service requests indicative of computer services for which the network device 
requests provisioning (see col. 9 lines 28-45, col. 4 lines 20-47, col. 10 lines 38-54). 

Pfwltzner does not explicitly teach that the access request is a RADIUS access 
request. Anderson, however, teaches a system and method sending requests for 
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accessing a resource wherein the request is a RADIUS request (see col. 10 lines 20- 
31). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to implement the use of RADIUS requests in Pfwltzner as taught by 
Anderson because doing so would make the method and system more secure. 

As to claims 3, 15, 25, Pfwltzner teaches the service request contains a device 
type and a service request identifier "URL" (see col. 13 lines 13-59, access request 
includes a URL and device information). 

7. Applicant's arguments have been fully considered but are not persuasive. 
Applicant argues in substance that neither Pfwltzner not Amin teaches a RADIUS 
request containing one or more of the device type, description or vendor. Examiner 
respectfully disagrees. Pfwltzner teaches sending authentication requests to a server 
wherein the request includes the sending device type (see col. 1 1 lines 28-37). 
However, Pfwltzner does not explicitly teach that the authentication request which 
includes the device type is sent using a RADIUS protocol. However, RADIUS protocol 
packets and protocol are very well known in the art. Examiner introduced Amin to show 
that it is very well knwon in the art at the time of the invention to use RADIUS protocol in 
authentication requests to authenticate a device sending the request (see Amin col. 2 
lines 59-col. 3 lines 26 and col. 14 lines 39-lines 66). It would have been obvious for one 
of the ordinary skill in the art at the time of the invention to incorporate the use of 
RADIUS protocol in Pfwltzner's requests which includes the requesting device type as 
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evident by Am in. Therefore, the combination of Pfwltzner and Am in teaches the 
limitations as claimed. 

8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to HUSSEIN A. EL CHANTI whose telephone number is 
(571)272-3999. The examiner can normally be reached on Mon-Fri 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wing Chan can be reached on (571)272-7493. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 

USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Hussein Elchanti/ 
Primary Patent Examiner 

Oct. 27, 2010 



